https://patchthecve.com/CVEs with upgrade or downgrade fix stepshttps://patchthecve.com/cve/CVE-2026-41059.htmlhttps://patchthecve.com/cve/CVE-2026-41059.htmlWed, 17 Jun 2026 10:46:06 +0000HIGH 8.2: OAuth2 Proxy is a reverse proxy that provides authentication using OAuth2 providers. Versions 7.5.0 through 7.15.1 have a configuration-dependent authentication bypass. Deployments are affected when all of the following are true: Use of `skip_auth_routes` or the legacy `skip_auth_regex`; use of patthttps://patchthecve.com/cve/CVE-2026-40575.htmlhttps://patchthecve.com/cve/CVE-2026-40575.htmlWed, 15 Jul 2026 02:21:07 +0000CRITICAL 9.1: OAuth2 Proxy is a reverse proxy that provides authentication using OAuth2 providers. Versions 7.5.0 through 7.15.1 may trust a client-supplied `X-Forwarded-Uri` header when `--reverse-proxy` is enabled and `--skip-auth-regex` or `--skip-auth-route` is configured. An attacker can spoof this header sohttps://patchthecve.com/cve/CVE-2026-40574.htmlhttps://patchthecve.com/cve/CVE-2026-40574.htmlWed, 17 Jun 2026 10:45:28 +0000MEDIUM 6.8: OAuth2 Proxy is a reverse proxy that provides authentication using OAuth2 providers. Prior to 7.15.2, an authorization bypass exists in OAuth2 Proxy as part of the email_domain enforcement option. An attacker may be able to authenticate with an email claim such as attacker@evil.com@company.com and shttps://patchthecve.com/cve/CVE-2026-34457.htmlhttps://patchthecve.com/cve/CVE-2026-34457.htmlFri, 24 Jul 2026 22:10:00 +0000CRITICAL 9.1: OAuth2 Proxy is a reverse proxy that provides authentication using OAuth2 providers. Versions prior to 7.15.2 contain a configuration-dependent authentication bypass in deployments where OAuth2 Proxy is used with an auth_request-style integration (such as nginx auth_request) and either --ping-user-ahttps://patchthecve.com/cve/CVE-2026-34454.htmlhttps://patchthecve.com/cve/CVE-2026-34454.htmlFri, 24 Jul 2026 22:10:00 +0000LOW 3.5: OAuth2 Proxy is a reverse proxy that provides authentication using OAuth2 providers. A regression introduced in 7.11.0 prevents OAuth2 Proxy from clearing the session cookie when rendering the sign-in page. In deployments that rely on the sign-in page as part of their logout flow, a user may be show